Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130342e302f32322d3232203d3e20323633373530.roa
File:                     34352e3137302e3130342e302f32322d3232203d3e20323633373530.roa (raw, json)
Hash identifier:          87Vl8OAxujxL4wpTrmTLEWzrAwHjGDaJPJwIBI5lywc=
Subject key identifier:   85:8A:E1:0E:49:A7:D8:82:B2:7B:75:72:8D:73:86:17:9B:74:1E:BD
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       783313E8E284272F948D289C3B0C39C8248D8CD5
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130342e302f32322d3232203d3e20323633373530.roa
Signing time:             Fri 01 May 2026 20:40:43 +0000
ROA not before:           Fri 01 May 2026 20:35:43 +0000
ROA not after:            Fri 30 Apr 2027 20:40:43 +0000
asID:                     263750
IP address blocks:        45.170.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 10:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:33:13:e8:e2:84:27:2f:94:8d:28:9c:3b:0c:39:c8:24:8d:8c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: May  1 20:35:43 2026 GMT
            Not After : Apr 30 20:40:43 2027 GMT
        Subject: CN=858AE10E49A7D882B27B75728D7386179B741EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:94:37:c7:3c:87:ae:e4:5a:02:a9:59:b9:
                    2b:dd:b3:30:fe:9a:d6:c1:b0:f6:cf:95:eb:1a:f0:
                    f0:7b:07:ed:1f:c5:4a:ac:38:08:2f:4a:7a:3a:fd:
                    7b:5e:cc:df:68:81:9d:71:3c:7c:fe:a8:20:dc:9a:
                    91:08:fa:05:82:b2:85:44:48:4c:f1:ae:fa:0d:ed:
                    e1:6b:e4:cd:29:e6:b9:3e:20:de:2e:7e:50:15:9f:
                    81:7b:8c:53:e2:39:a4:9b:be:45:15:fa:2c:c0:01:
                    6a:fc:20:84:3e:87:ac:91:a5:95:cd:9f:c8:c1:ec:
                    6a:17:40:2f:9f:98:db:b9:5d:16:c3:69:f1:24:5f:
                    61:3a:e4:4e:df:31:7a:34:24:e0:91:51:70:47:f3:
                    74:22:7f:20:ba:ce:21:fc:fd:6a:55:71:42:93:61:
                    8c:7c:17:4d:b5:2c:9f:88:d2:78:c2:cc:c5:27:e4:
                    aa:7e:f5:a4:68:27:82:32:c5:2e:64:f8:76:41:19:
                    95:4e:7f:4d:9a:e2:9c:1a:cc:aa:7a:3f:27:cc:64:
                    f6:0a:be:a1:b2:16:be:2a:78:50:dc:1f:16:ac:c1:
                    c2:c5:c5:82:aa:41:30:99:f1:93:d1:29:1e:ec:45:
                    7f:f6:9c:8e:38:40:41:e7:e4:e1:0c:04:0e:bf:7e:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8A:E1:0E:49:A7:D8:82:B2:7B:75:72:8D:73:86:17:9B:74:1E:BD
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130342e302f32322d3232203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:d2:bc:69:19:6d:4e:89:3b:f8:ee:27:0a:75:4f:d7:d9:9b:
         5a:fa:25:b5:72:55:b6:85:39:89:41:41:f9:16:0c:7b:eb:f0:
         e5:7c:d9:b7:91:f5:45:9b:57:34:bc:82:69:47:4b:81:18:0c:
         ef:e9:7f:8d:2a:a2:66:d0:80:9c:fd:f0:1f:90:6e:19:bc:01:
         55:f8:5d:ca:99:8d:20:94:17:e5:07:a4:68:49:8d:32:24:cd:
         90:40:62:f1:41:04:23:74:b9:eb:35:80:27:ad:39:89:8e:ba:
         06:31:91:86:a0:32:9c:3b:40:e4:04:9a:1c:0d:13:0d:73:82:
         05:53:61:2e:25:aa:03:90:81:0d:a4:6b:41:86:7c:a5:5d:82:
         29:14:68:3f:18:30:b2:c0:0f:cb:b1:1d:18:26:30:a6:eb:98:
         be:4f:b8:16:73:61:f8:98:37:f9:39:ea:38:2a:c3:ba:78:1d:
         df:d2:f9:90:42:34:1b:a7:9f:ce:76:b6:e1:97:ff:f8:f7:b5:
         81:0d:2b:af:99:a0:98:a1:be:64:03:ba:85:fc:11:2b:23:6c:
         66:de:36:2f:e0:02:32:4b:27:07:67:55:05:82:dc:1f:1f:91:
         35:ef:1f:04:11:39:44:c7:0d:8d:f0:94:26:ba:25:90:0c:2d:
         13:15:3a:f8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeDMT6OKEJy+UjSicOww5yCSNjNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4N0YzNDMzRkRERjIzRERDNUZDMkVDOTA4NzZGNDkw
QjYwM0Q3NDAeFw0yNjA1MDEyMDM1NDNaFw0yNzA0MzAyMDQwNDNaMDMxMTAvBgNV
BAMTKDg1OEFFMTBFNDlBN0Q4ODJCMjdCNzU3MjhENzM4NjE3OUI3NDFFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJ5Q3xzyHruRaAqlZuSvdszD+
mtbBsPbPlesa8PB7B+0fxUqsOAgvSno6/XtezN9ogZ1xPHz+qCDcmpEI+gWCsoVE
SEzxrvoN7eFr5M0p5rk+IN4uflAVn4F7jFPiOaSbvkUV+izAAWr8IIQ+h6yRpZXN
n8jB7GoXQC+fmNu5XRbDafEkX2E65E7fMXo0JOCRUXBH83QifyC6ziH8/WpVcUKT
YYx8F021LJ+I0njCzMUn5Kp+9aRoJ4IyxS5k+HZBGZVOf02a4pwazKp6PyfMZPYK
vqGyFr4qeFDcHxaswcLFxYKqQTCZ8ZPRKR7sRX/2nI44QEHn5OEMBA6/fmVTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhYrhDkmn2IKye3VyjXOGF5t0Hr0wHwYDVR0j
BBgwFoAUHofzQz/d8j3cX8LskIdvSQtgPXQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMzhEOUYxQzg3MUJCOEQxMEJFRjQ1NTgxRTk1MEJCODEz
MzFFQzREM0ZFMzg4RkUxRjQ3NDZBRUEzM0FDQjhGLzAvMUU4N0YzNDMzRkRERjIz
RERDNUZDMkVDOTA4NzZGNDkwQjYwM0Q3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRTg3RjM0MzNGRERGMjNEREM1
RkMyRUM5MDg3NkY0OTBCNjAzRDc0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjM4RDlGMUM4NzFCQjhEMTBCRUY0NTU4MUU5NTBCQjgxMzMxRUM0RDNG
RTM4OEZFMUY0NzQ2QUVBMzNBQ0I4Ri8wLzM0MzUyZTMxMzczMDJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzczNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLapo
MA0GCSqGSIb3DQEBCwUAA4IBAQCh0rxpGW1OiTv47icKdU/X2Zta+iW1clW2hTmJ
QUH5Fgx76/DlfNm3kfVFm1c0vIJpR0uBGAzv6X+NKqJm0ICc/fAfkG4ZvAFV+F3K
mY0glBflB6RoSY0yJM2QQGLxQQQjdLnrNYAnrTmJjroGMZGGoDKcO0DkBJocDRMN
c4IFU2EuJaoDkIENpGtBhnylXYIpFGg/GDCywA/LsR0YJjCm65i+T7gWc2H4mDf5
Oeo4KsO6eB3f0vmQQjQbp5/Odrbhl//497WBDSuvmaCYob5kA7qF/BErI2xm3jYv
4AIySycHZ1UFgtwfH5E17x8EETlExw2N8JQmuiWQDC0TFTr4
-----END CERTIFICATE-----
Generated at Wed May 13 20:56:10 2026 by rpki-client